TransportHub
Sign up

Privacy policy

Last updated: 19 July 2026

This policy explains what data we collect, how we use it and what your rights are under the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

1. Controller

The data controller is TransportHub. For any request about your data you can contact us at contact@transporthub.ro.

2. Data we collect

  • Account data: name, email, password (bcrypt hash), phone, account type, platform ID.
  • Company data: name, tax ID (CUI), registered office, contact people, locations.
  • Usage data: listings posted, offers placed, orders, messages, ratings, incident reports.
  • Technical data: IP address, user agent, authentication logs, cookies.

3. Purpose of processing

  • Providing the platform services (authentication, posting listings, messaging and so on).
  • Sending notifications (email and in-app) according to your preferences.
  • Preventing fraud and maintaining the integrity of the platform.
  • Improving the product through anonymous aggregation.
  • Complying with legal obligations (tax reporting, requests from authorities).

4. Who we share data with

Your data is not sold to third parties. We share it only with:

  • Infrastructure providers: Netcup (server / hosting, in the EU), PostgreSQL hosted on our own infrastructure (database), Amazon Web Services (Amazon SES, transactional email, EU region) and Resend (transactional email, fallback), Cloudflare (DNS, email routing).
  • Payments and invoicing: Stripe (card payment processing) and Oblio (issuing invoices and submitting them to e-Factura).
  • AI-assisted checks: Anthropic (the activation documents you upload, the freight texts you ask us to read automatically and the questions you ask the assistant are sent to the Claude model; they are not used to train models).
  • Meta Platforms Ireland (Facebook, Instagram): only if you accept Marketing cookies, through the Meta Pixel. Details in the Cookie policy.
  • Crisp: only if you turn on the support chat in the cookie preferences.
  • Other platform users: your public profile data (company name, tax ID, rating, listings posted) is visible to other authenticated users.
  • Legal authorities: only upon the formal request of a competent authority.

5. Your GDPR rights

You have the following rights:

  • Access: to find out what data we hold about you.
  • Rectification: to correct inaccurate data.
  • Erasure ("the right to be forgotten"): to ask us to delete your account and the data linked to it.
  • Restriction: to limit certain processing.
  • Portability: to receive your data in a structured format.
  • Objection: to object to processing for marketing purposes.

To exercise these rights, write to contact@transporthub.ro. We reply within 30 days at the latest.

6. Security

We use technical and organisational measures to protect your data: passwords stored as bcrypt hashes, encrypted HTTPS connections, sessions with HttpOnly cookies, logical separation between environments (production / preview / dev).

7. Cookies

We use cookies that are strictly necessary for the platform to work (authentication, session, remembering preferences). The Meta Pixel (Facebook, Instagram) and the Crisp chat start only with your explicit consent, given in the cookie banner. Full details in the Cookie policy.

8. Data retention

We keep your data for as long as your account is active. When the account is closed we delete personal data within 30 days at the latest, except for the data we are legally required to keep (for example invoices, 10 years under Romanian tax law).

9. Complaints

If you believe your rights have been breached, you can contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.

10. Early-access waiting list

10.1 What data we collect

Through the early-access form we collect: name, email address, phone number (optional), company name (optional), company type (carrier, freight forwarder, direct client or partner). We also record the IP address and the browser user agent at the moment you sign up, for security and spam prevention.

10.2 Purpose of processing

The data collected through the waiting list is used solely to notify you by email when the TransportHub platform becomes publicly available, and to send you a confirmation email for your sign-up.

10.3 Legal basis

The processing is based on your explicit consent (Art. 6(1)(a) GDPR), given by ticking the corresponding box in the form. You can withdraw your consent at any time, as described in section 10.5 below.

10.4 Storage period

Waiting-list data is kept until the platform launch plus 12 months, or until you unsubscribe or ask for deletion, whichever comes first.

10.5 Your rights

In relation to the waiting-list data, you have the right to:

  • Access: to find out what data we have stored about you.
  • Rectification: to correct inaccurate data.
  • Erasure: to ask for your entry to be removed entirely from the early-access list.
  • Portability: to receive your data in a structured format (JSON or CSV).
  • Withdrawal of consent: you can withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

For any request regarding the waiting-list data, contact us at: contact@transporthub.ro. We reply within 30 days at the latest.